PT-2016-4123 · Hcl+1 · Hcl Domino+2

Published 2016-06-26 · Updated 2019-10-16 · CVE-2016-0278

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2016-0277, CVE-2016-0279, and CVE-2016-0301.

Fix

RCE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-0278

Affected Products

Hcl Domino

Lotus Domino

Domino

References · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg21983292 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-0278 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0278 · Security Note
• http://talosintelligence.com/reports/TALOS-2016-0090 · Note
• http://securitytracker.com/id/1036091 · Note